Practical articles on HIPAA rules, HITRUST certification, enforcement, and healthcare data protection.
Breach NotificationA 575-day delay in breach notification led to a $500K settlement. Learn the 5 key mistakes healthcare orgs make in breach response and how to prevent them.
Regulatory FrameworkHealthcare compliance officers must manage HIPAA alongside stricter state laws, private lawsuits, and enforcement actions to protect patient data effectively.
Breach NotificationThis guide highlights the importance of targeted training and verification protocols to prevent social engineering attacks on healthcare help desks.
OCR Enforcement & PenaltiesThe $800K Lehigh Valley settlement reveals how ransomware attacks expose healthcare compliance gaps and the need for proactive cybersecurity measures.
Get weekly security insights and compliance updates delivered to your inbox.
Breach NotificationBusiness Associate Agreements set rules but don't ensure vendor security. Healthcare entities must enforce continuous oversight to prevent costly data breaches.
Breach NotificationThe $4.6 million Washington Gastroenterology breach settlement exposes five myths that leave organizations vulnerable to costly litigation and compliance failures.
Breach NotificationJefferson County's $2.25M breach settlement underscores the need for healthcare organizations to build breach defense programs that detect and contain intrusions early.
Breach NotificationOn October 2, South African pathology firm Ampath Laboratories detected and contained a cybersecurity incident. Two weeks later, the threat actor ByteToBreach claimed on a dark web forum to have stole
OCR Enforcement & PenaltiesA Pennsylvania dental practice paid $140,000 to settle HIPAA violations, not for a data breach or ransomware attack, but for missing paperwork. The Office for Civil Rights (OCR) asked Shen Smiles for
Breach NotificationWhen you review breach settlements like Valley Oaks Health s recent preliminary approval, you might draw the wrong conclusions. This settlement covered 50,352 affected individuals and includes up to $
Breach NotificationThese questions are common in compliance team meetings and privacy officer discussions. After Labcorp agreed to a $2.29 million settlement over a 2019 breach involving its debt collector, AMCA, concer
OCR Enforcement & PenaltiesThe Conventional Wisdom When the OCR announces another right-of-access settlement, compliance officers often react predictably: update the access policy, schedule training, and document everything. Th
Breach NotificationWhat the Data Shows Between December 2025 and September 2026, four healthcare organizations disclosed data breaches that revealed a troubling pattern: the gap between detection and notification often
Breach NotificationYou ve hardened your perimeter, run quarterly vulnerability scans, and have a vendor risk management program. So you re protected from class action litigation after a breach, right? Not even close. Th
Breach NotificationScope This guide outlines the legal and operational steps your organization must take when a data breach leads to class action litigation. You ll learn about the regulatory framework, timeline require
Breach NotificationHealthcare organizations often practice breach response procedures, conduct tabletop exercises, and maintain incident response plans. Yet, operational failures still appear in settlement after settlem
Breach NotificationScope This guide focuses on the technical controls and operational practices your team needs to implement in response to the 239% increase in hacking-related healthcare data breaches from January 2018
Breach NotificationUnderstanding the Impact of Breach Settlements When MCNA settled its class action lawsuit for a 2023 data breach affecting 8.9 million individuals, compliance officers were eager to understand the imp
Breach NotificationThe Decision at Hand When a data breach leads to class action litigation, you must decide whether to settle quickly or contest the claims in court. Highlands Oncology Group opted for settlement after
Breach NotificationWhen The Gentlemen ransomware group exfiltrated data from Nutex Health s servers in August 2026, the Houston-based healthcare company faced a significant cybersecurity incident. The attack followed a
